
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/8fb3012a-d947-3398-947d-9744cdd32093.roa
File: 8fb3012a-d947-3398-947d-9744cdd32093.roa (raw, json)
Hash identifier: EsOXidHOc9bJ4YV+lqOSCnrmppdHWKh88B9lmxjRPLs=
Subject key identifier: 89:B2:A0:C3:E3:4B:20:06:ED:98:2E:3C:15:39:CE:C4:AA:81:30:EE
Certificate issuer: /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
Certificate serial: 010D0C9F4328584B5DD1E2B0405A20AAFBDC2E00
Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/8fb3012a-d947-3398-947d-9744cdd32093.roa
Signing time: Tue 30 Sep 2025 13:00:40 +0000
ROA not before: Tue 30 Sep 2025 13:00:40 +0000
ROA not after: Mon 29 Dec 2025 14:00:40 +0000
asID: 16509
IP address blocks: 2605:2c40:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:5d:d1:e2:b0:40:5a:20:aa:fb:dc:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
Validity
Not Before: Sep 30 13:00:40 2025 GMT
Not After : Dec 29 14:00:40 2025 GMT
Subject: CN=e0b27588-a576-4a0f-b010-c474194b9fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:8a:b9:f6:46:20:80:89:f5:9c:41:2b:c1:
f4:c3:2a:e8:3f:5a:87:2d:33:b4:98:f5:e5:f2:0e:
8b:52:79:44:5c:42:1b:e5:f0:9e:4a:87:e1:01:ef:
dc:a9:1b:6e:6a:1b:8c:53:bc:09:5b:91:e1:8d:2e:
08:57:4f:88:84:8b:27:1a:a3:bc:8c:e4:94:4d:d3:
87:c2:fd:ba:03:40:23:62:b5:1f:11:a0:54:6a:5a:
1b:93:11:35:77:c5:96:08:9d:6e:12:27:ee:16:a4:
bd:46:2b:4b:f7:b5:2b:f1:22:a0:fe:b4:a7:67:bb:
35:0c:2e:1c:45:64:a8:02:88:ec:23:73:ee:2c:95:
11:8c:bf:d3:db:bb:7a:dd:8f:b9:d7:23:34:8c:df:
86:cc:29:e7:b5:ce:a2:5a:29:79:83:d1:22:91:59:
da:7a:4b:5f:81:64:75:fb:19:c5:4c:a6:9f:a0:7b:
e1:98:18:40:de:78:e6:b5:11:af:62:ad:85:bc:3c:
2c:46:d2:0a:81:90:d5:95:74:d4:7b:b3:5d:52:89:
53:6c:69:fe:13:34:f9:22:0f:b6:08:d4:a6:ac:d7:
44:7a:d8:5d:14:a8:a6:76:c3:2b:be:be:3c:e3:ec:
72:46:c0:35:88:b5:95:47:e4:5b:5a:76:87:10:f2:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:A0:C3:E3:4B:20:06:ED:98:2E:3C:15:39:CE:C4:AA:81:30:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/8fb3012a-d947-3398-947d-9744cdd32093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl
X509v3 Authority Key Identifier:
keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:2c40:400::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:d8:cf:3a:d8:f9:0e:04:db:74:76:6c:d2:6b:86:3e:9d:99:
47:86:83:ca:09:c4:e9:e2:ea:01:f0:e5:13:69:b5:ab:e2:04:
4d:4e:03:59:46:f0:10:9b:3c:d3:c3:0d:87:ca:71:53:85:68:
4b:73:f9:c2:23:d5:a0:49:79:5b:a9:f4:12:f1:1b:82:25:04:
53:41:6d:a2:24:94:bb:f5:c1:92:f1:66:c5:65:8d:78:72:bb:
dd:4d:13:00:ff:1e:cc:04:24:a2:2d:ec:c2:f4:6b:f9:cd:f0:
20:fb:f5:64:a5:ac:40:d9:8a:ef:9c:7e:31:8e:83:77:e1:fd:
dd:6c:a0:5e:4b:0a:96:b9:74:55:a8:ec:68:de:84:1e:9a:4d:
76:4c:f7:e0:74:a9:5a:cf:29:3c:86:8e:2a:de:39:aa:3b:37:
0a:b9:c3:bd:9d:3a:37:fd:5d:1a:5f:3e:96:5f:35:c8:46:16:
c9:1f:86:53:50:15:d5:c6:7c:7a:dd:77:ff:0c:21:96:25:b3:
6a:7e:9a:5e:2a:40:f2:ef:20:c2:0b:e0:db:8f:af:c2:50:4f:
2d:32:fe:f1:9e:86:ce:38:cd:2a:88:5b:40:dd:ba:91:08:e8:
0e:97:61:39:f4:78:a2:06:6f:d9:53:32:fd:6b:89:95:3e:b1:
1b:db:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:43:33 2025 by rpki-client